This policy is written to support transparent handling of personal information under Tanzania's Personal Data Protection Act, 2022 and applicable regulations. It is not a claim of regulatory certification.
1. Scope and responsibility
KafukuTech provides website development, custom software, mobile applications, integrations, hosting support and maintenance services. This policy applies to information collected through kafukutech.com, project enquiries, the Client Portal, support tickets, invoices and other direct business interactions.
For a client-owned system, the client may be the primary data controller while KafukuTech acts as a service provider or processor according to the written contract and project instructions.
2. Information we may collect
- Contact information: name, organisation, email address, phone number and business address.
- Project information: requirements, project notes, progress updates, support messages and approved files.
- Billing information: invoice records, payment method, transaction reference and verification status. We do not ask clients to submit mobile-money PINs or card passwords.
- Technical information: browser, device type, IP address, pages visited, security logs and basic analytics used to operate and protect the service.
- Account information: password hashes, login timestamps and optional one-time verification codes. Passwords are not stored in readable form.
3. Why we use information
Information is used only for clear business and operational purposes, including responding to enquiries, preparing quotations, delivering projects, providing support, tracking progress, issuing invoices and receipts, improving service reliability, preventing abuse and meeting legal or accounting duties.
Where consent is the appropriate basis, it may be withdrawn by contacting us. Withdrawal does not invalidate processing that was lawful before the request.
3A. AI-assisted chat and human handoff
When the website AI chat is enabled, the message you type and limited conversation context may be processed by an AI service provider to generate a support response. KafukuTech also stores the chat transcript and basic technical information needed to operate, secure and continue the conversation.
If the assistant cannot answer reliably, you ask for a person, or the issue requires a business decision, the conversation may be handed to a KafukuTech team member. Where configured, a short handoff alert may be sent to the authorised administrator by email or WhatsApp. Do not enter passwords, PINs, one-time codes, card secrets or private API keys in chat.
5. Security measures
Depending on the service and hosting plan, controls may include TLS encryption, password hashing, role-based permissions, CSRF protection, login rate limiting, optional two-step verification, audit records, restricted database access, backups and incident response procedures. No internet service can guarantee absolute security, so controls are reviewed and improved as risks change.
6. Retention and deletion
Information is kept only for as long as needed to provide the service, maintain project and support history, meet accounting or legal requirements, resolve disputes and protect system security.
Expired one-time codes and unnecessary temporary records are removed or invalidated. Backup copies may remain for a limited recovery period before normal rotation removes them.
7. Your data protection rights
Subject to applicable law and verification of identity, a person may ask for access to their information, correction of inaccurate information, deletion where legally permitted, restriction or objection to certain processing, and information about how their data is used. A person may also raise a concern with Tanzania's Personal Data Protection Commission.
Requests should include enough detail for us to identify the relevant account, project or interaction without asking for unnecessary sensitive information.
8. Cookies and analytics
The website may use essential session cookies for login security, theme preferences and basic analytics. Essential cookies are required for secure portal operation. We avoid using cookies to sell behavioural advertising profiles.
9. Policy changes
This policy may be updated when services, legal requirements or security practices change. The effective date at the top of this page shows the latest published version.